exploitDog

CVE-2012-3367

Опубликовано: 19 июл. 2012

Источник: redhat

CVSS2: 5.5

EPSS Низкий

Описание

Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System does not properly check certificate revocation requests made through the web interface, which allows remote attackers with permissions to revoke end entity certificates to revoke the Certificate Authority (CA) certificate.

Ссылки на источники

https://www.cve.org/CVERecord?id=CVE-2012-3367
https://nvd.nist.gov/vuln/detail/CVE-2012-3367

Дополнительная информация

Статус:

Moderate

https://bugzilla.redhat.com/show_bug.cgi?id=836268System: CA certificate can be revoked

EPSS

Процентиль: 65%

0.01163

Низкий

5.5 Medium

CVSS2

Связанные уязвимости

CVE-2012-3367

nvd

около 14 лет назад

Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System does not properly check certificate revocation requests made through the web interface, which allows remote attackers with permissions to revoke end entity certificates to revoke the Certificate Authority (CA) certificate.

GHSA-jh3f-4cfw-pgf7

github

больше 4 лет назад

Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System does not properly check certificate revocation requests made through the web interface, which allows remote attackers with permissions to revoke end entity certificates to revoke the Certificate Authority (CA) certificate.

EPSS

Процентиль: 65%

0.01163

Низкий

5.5 Medium

CVSS2